The Linux kernel's spear ADC driver (drivers/iio/adc/spear_adc.c) had a flaw where the completion object 'st->completion' was initialized after registering the interrupt handler with devm_request_irq(). If an interrupt occurred before init_completion() was called, the interrupt service routine spear_adc_isr() would call complete() on an uninitialized completion structure. This caused the kernel to dereference a NULL pointer and triggered a Kernel Address Sanitizer (KASAN) wild-memory-access error, potentially leading to a kernel panic. The fix involved moving the init_completion() call to before devm_request_irq() to ensure the completion is properly initialized before any interrupts can occur.

This vulnerability could cause a kernel panic due to a race condition in the interrupt handling of the spear ADC driver. The kernel panic results from dereferencing an uninitialized completion object, which may lead to denial of service on affected systems. There is no indication of privilege escalation or arbitrary code execution from the provided data.

A fix is available that moves the initialization of the completion object before the interrupt request registration to prevent the race condition. Users should update their Linux kernel to a version that includes this fix. Since no vendor advisory or patch links are provided, check the official Linux kernel repositories or distributions for the patched version. Patch status is not yet confirmed in the provided data — check the vendor advisory for current remediation guidance.